CVE-2025-71194

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix deadlock in wait_current_trans() due to ignored transaction type

When wait_current_trans() is called during start_transaction(), it

currently waits for a blocked transaction without considering whether

the given transaction type actually needs to wait for that particular

transaction state. The btrfs_blocked_trans_types[] array already defines

which transaction types should wait for which transaction states, but

this check was missing in wait_current_trans().

This can lead to a deadlock scenario involving two transactions and

pending ordered extents:

1. Transaction A is in TRANS_STATE_COMMIT_DOING state

2. A worker processing an ordered extent calls start_transaction()

with TRANS_JOIN

3. join_transaction() returns -EBUSY because Transaction A is in

TRANS_STATE_COMMIT_DOING

4. Transaction A moves to TRANS_STATE_UNBLOCKED and completes

5. A new Transaction B is created (TRANS_STATE_R

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References